Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: 2H5RTq6pIlK3EovCHpj9CsFXbEpV6csHmzKOjGQFPVk=
Subject key identifier: C1:B9:5A:71:4B:E1:4C:D7:5F:FF:5E:65:68:F1:EB:08:53:7A:9A:85
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 0194BC050AEE4833FAFE0E7511976AD57D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: o5cBHRhRJ6+hlkVAtTIHLySRO3FEqkPVfcP0YI1WYAU=)
2: tjHH92n144_2kyCpRlp025zS_60.roa (hash: ok5CTqSNJzdSSlXk4Sa58sv7A+s3smyB2E8BTCCRwo4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0a:ee:48:33:fa:fe:0e:75:11:97:6a:d5:7d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=c1b95a714be14cd75fff5e6568f1eb08537a9a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:71:18:46:79:85:c1:30:70:3f:64:7c:3c:
3a:f5:cc:e0:44:4c:34:70:7f:5a:54:db:48:d7:89:
93:2f:92:c3:09:9f:2e:40:28:6f:20:81:44:6b:6b:
d6:56:3a:d2:58:42:21:4c:e0:4b:ec:f4:ba:c1:64:
57:40:fa:b0:9c:74:6d:d4:cc:0d:61:40:7d:38:8b:
79:7d:28:49:ee:6c:62:17:01:04:66:48:62:1d:29:
01:da:81:78:12:30:52:7b:05:dc:1b:03:7d:c3:a4:
fa:15:78:71:b3:41:1b:16:24:a4:29:d8:63:60:36:
8d:2c:aa:08:54:76:1a:f9:41:81:1f:99:a5:d8:0e:
f0:66:5e:f8:6e:8b:d0:b7:fb:3e:44:9a:ca:c9:50:
b5:18:a6:50:b5:ae:ba:6a:d2:76:82:2f:82:b5:61:
68:01:fe:5e:2f:62:ab:7f:90:f5:21:f7:c6:cc:a3:
53:f2:a2:78:25:81:ca:db:a3:09:46:66:6a:b3:6c:
60:ac:9c:6e:a4:cb:ec:28:b5:dd:03:0c:22:23:dd:
4b:9b:51:ed:d7:93:9f:1e:da:b0:08:99:7e:be:e0:
bf:dd:67:82:88:da:13:68:02:e7:06:55:7d:51:df:
39:eb:9d:70:86:19:7e:e8:90:02:2d:b6:a6:10:38:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B9:5A:71:4B:E1:4C:D7:5F:FF:5E:65:68:F1:EB:08:53:7A:9A:85
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0a:e7:e3:ea:9d:cf:f2:c3:fd:41:30:74:01:7e:ee:12:f3:
fc:59:71:b3:18:8f:68:18:14:39:67:d3:8d:25:a9:8f:02:0b:
61:e8:f7:c7:76:9b:7a:61:39:03:e7:2c:a6:7d:78:db:96:b6:
99:51:6f:5f:54:7a:f9:1b:d3:96:b4:f3:e1:7f:96:d9:2a:25:
45:64:47:a7:4a:32:19:fe:b8:88:d8:4f:b2:4a:13:6e:56:fe:
4e:fb:b4:ca:9b:39:c5:54:16:07:4d:d1:ba:a5:3a:6f:7a:07:
58:f4:bf:e3:6c:21:71:3c:6f:ef:61:10:bb:3b:67:f5:a5:ca:
c0:8f:52:fd:36:5d:cc:85:39:3e:b0:51:ad:58:1a:0e:bc:f9:
26:a0:c4:d8:3a:81:0e:7c:99:f5:9f:98:ff:2b:9d:6a:ce:e4:
80:d8:0f:f2:46:1c:6b:2c:7d:87:2c:f7:b3:26:7d:fa:fc:e2:
82:38:a2:13:68:0f:27:9b:d7:05:61:ae:d8:d7:df:07:b9:1a:
74:51:e6:0d:3b:f6:ce:ae:35:12:27:8c:94:96:03:81:a9:14:
c7:23:c8:1a:05:8e:ba:57:6a:24:59:9b:17:55:11:e7:65:86:
ac:04:67:ac:9c:ac:d1:96:c0:6b:76:82:db:63:e5:27:57:a1:
40:0f:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:55:53 2025 by rpki-client